# Skills for Security Skills for Security: what each one does, an install command and example prompts. 1434 cards · page 18 of 36 - HTML: https://affpapa.org/en/nevibecode/skills/topic/security?page=18 - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [docker-development](https://affpapa.org/en/nevibecode/skills/docker-development.md) — skill · Alireza Rezvani · Claude Code · 702 installs — This skill reviews Dockerfiles, Compose files, and containers for build, image-size, and security issues. - [ghidra](https://affpapa.org/en/nevibecode/skills/ghidra.md) — skill · mitsuhiko · Claude Code, Codex, Cursor +3 · 652 installs — Runs headless Ghidra analysis to decompile executables into C and export strings, symbols, or call graphs. - [secrets-vault-manager](https://affpapa.org/en/nevibecode/skills/secrets-vault-manager.md) — skill · Alireza Rezvani · Claude Code · 697 installs — This skill helps manage infrastructure-level secrets across Vault and cloud stores, with access policies, rotation, and auditing for services and operators. - [database-schema-designer](https://affpapa.org/en/nevibecode/skills/database-schema-designer.md) — skill · Alireza Rezvani · Claude Code · 692 installs — This skill turns database requirements into relational schemas, ERDs, and migrations. - [dependency-auditor](https://affpapa.org/en/nevibecode/skills/dependency-auditor.md) — skill · Alireza Rezvani · Claude Code · 688 installs — An offline Claude Code skill that checks dependencies for vulnerability patterns and license conflicts, then drafts a risk-ranked upgrade plan. - [android-permissions-security](https://affpapa.org/en/nevibecode/skills/android-permissions-security.md) — skill · Google LLC · Claude Code, Codex, Cursor +3 · 508 installs — Audits an Android project for permission and IPC holes: weak custom permissions, spoofable caller checks, over-broad URI grants. - [replica-backend](https://affpapa.org/en/nevibecode/skills/replica-backend.md) — skill · Jakeschincariol · Claude Code, Codex, Cursor +3 · 613 installs — Builds the backend of an app clone: auth, database migrations and access rules, Stripe payments, email and background jobs. - [skill-vetter](https://affpapa.org/en/nevibecode/skills/skill-vetter.md) — skill · UseAI-pro · Claude Code, Codex, Cursor +3 · 21100 installs — Reviews OpenClaw SKILL.md files before installation. - [atlassian-admin](https://affpapa.org/en/nevibecode/skills/atlassian-admin.md) — skill · Alireza Rezvani · Claude Code · 682 installs — Manage Atlassian users, groups, access, and organization settings. - [octocat](https://affpapa.org/en/nevibecode/skills/octocat.md) — skill · mcollina · Claude Code, Codex, Cursor +3 · 1300 installs — This skill handles Git and GitHub work through the gh CLI. - [oauth](https://affpapa.org/en/nevibecode/skills/mcollina-oauth.md) — skill · mcollina · Claude Code, Codex, Cursor +3 · 1300 installs — Implements OAuth 2.0 and 2.1 authorization flows in Fastify applications using PKCE and token rotation. - [pr-review-expert](https://affpapa.org/en/nevibecode/skills/pr-review-expert.md) — skill · Alireza Rezvani · Claude Code · 675 installs — Reviews GitHub PRs and GitLab MRs for security risks, breaking changes, and test gaps. - [credentials](https://affpapa.org/en/nevibecode/skills/credentials.md) — skill · google-deepmind · Claude Code, Codex, Cursor +3 · 1400 installs — Checks whether a key exists in .env and asks the user to add it without pasting the value into chat. - [env-secrets-manager](https://affpapa.org/en/nevibecode/skills/env-secrets-manager.md) — skill · Alireza Rezvani · Claude Code · 667 installs — This skill audits environment variables and scans repositories for likely secret leaks. - [ghost-repo-context](https://affpapa.org/en/nevibecode/skills/ghost-repo-context.md) — skill · ghostsecurity · Claude Code, Codex, Cursor +3 · 3800 installs — Scans a codebase, finds projects, and writes an architecture map to repo.md. - [ghost-report](https://affpapa.org/en/nevibecode/skills/ghost-report.md) — skill · ghostsecurity · Claude Code, Codex, Cursor +3 · 3800 installs — Merges findings from every Ghost Security scan skill into a single report ranked by risk and confidence. - [ghost-validate](https://affpapa.org/en/nevibecode/skills/ghost-validate.md) — skill · ghostsecurity · Claude Code, Codex, Cursor +3 · 3800 installs — Validates security vulnerability findings by tracing code paths and checking live endpoints. - [code-review](https://affpapa.org/en/nevibecode/skills/phuryn-code-review.md) — skill · phuryn · Claude Code, Codex, Cursor +3 · 310 installs — Reviews code for actionable defects, with correctness as the default focus. - [soc2-compliance](https://affpapa.org/en/nevibecode/skills/soc2-compliance.md) — skill · Alireza Rezvani · Claude Code · 658 installs — Guides SaaS teams through SOC 2 Type I and Type II preparation. - [platform-permission-set-generate](https://affpapa.org/en/nevibecode/skills/platform-permission-set-generate.md) — skill · forcedotcom · Claude Code, Codex, Cursor +3 · 6500 installs — Creates Salesforce PermissionSet XML for object, field, user, and app permissions. - [cloud-security](https://affpapa.org/en/nevibecode/skills/cloud-security.md) — skill · Alireza Rezvani · Claude Code · 643 installs — Flags exploitable misconfigurations across AWS, Azure and GCP: IAM privilege escalation paths, public buckets, open security group ports. - [clerk-react-patterns](https://affpapa.org/en/nevibecode/skills/clerk-react-patterns.md) — skill · clerk · Claude Code, Codex, Cursor +3 · 19700 installs — Provides authentication patterns for React single-page apps using @clerk/react in Vite and CRA. - [dx-code-analyzer-run](https://affpapa.org/en/nevibecode/skills/dx-code-analyzer-run.md) — skill · forcedotcom · Claude Code, Codex, Cursor +3 · 6400 installs — Runs Salesforce Code Analyzer over your project and works through the results: engines, categories, severities, auto-fixes. - [threat-detection](https://affpapa.org/en/nevibecode/skills/threat-detection.md) — skill · Alireza Rezvani · Claude Code · 637 installs — Supports proactive threat hunting with hypotheses, IOC sweeps and telemetry anomaly checks. - [google-workspace-cli](https://affpapa.org/en/nevibecode/skills/google-workspace-cli.md) — skill · Alireza Rezvani · Claude Code · 636 installs — Use this skill to manage Google Workspace through the gws CLI, from sending Gmail messages to listing Drive files. - [incident-response](https://affpapa.org/en/nevibecode/skills/incident-response.md) — skill · Alireza Rezvani · Claude Code · 634 installs — Sorts a fired alert into one of 14 incident types, filters false positives, and tells you who to page and what to preserve. - [review-swarm](https://affpapa.org/en/nevibecode/skills/review-swarm.md) — skill · Dimillian · Claude Code, Codex, Cursor +3 · 756 installs — Runs a parallel read-only review of a git diff or selected files. - [ciso-advisor](https://affpapa.org/en/nevibecode/skills/ciso-advisor.md) — skill · Alireza Rezvani · Claude Code · 623 installs — Turns security risks into financial estimates and helps plan compliance work. - [terraform-patterns](https://affpapa.org/en/nevibecode/skills/terraform-patterns.md) — skill · Alireza Rezvani · Claude Code · 617 installs — Analyzes Terraform code for anti-patterns and scaffolds structured modules. - [apigee-agent-gateway-governance](https://affpapa.org/en/nevibecode/skills/apigee-agent-gateway-governance.md) — skill (official Google) · google · Claude Code, Gemini CLI, Codex · 145 installs — This skill builds an Apigee proxy that inspects LLM traffic through Agent Gateway. - [solidity-auditor](https://affpapa.org/en/nevibecode/skills/solidity-auditor.md) — skill · pashov · Claude Code, Codex, Cursor +3 · 830 installs — Runs a security audit of your Solidity code while you develop: one pass over the repo or a single file, with a report at the end. - [build-game-map-editor](https://affpapa.org/en/nevibecode/skills/build-game-map-editor.md) — skill · MengTo · Claude Code, Codex, Cursor +3 · 1200 installs — Guides the creation of production-linked browser map editors for Three.js and isometric games. - [platform-sharing-rules-generate](https://affpapa.org/en/nevibecode/skills/platform-sharing-rules-generate.md) — skill · forcedotcom · Claude Code, Codex, Cursor +3 · 6000 installs — A skill for Salesforce record-level access: creates, edits and deletes Sharing Rules metadata through sf. - [django-access-review](https://affpapa.org/en/nevibecode/skills/django-access-review.md) — skill · getsentry · Claude Code, Codex, Cursor +3 · 2700 installs — A skill that hunts IDOR and broken authorization in Django: it walks views, DRF viewsets and ORM queries and shows where checks are missing. - [kubernetes-skill](https://affpapa.org/en/nevibecode/skills/kubernetes-skill.md) — skill · LukasNiessen · Claude Code, Codex, Cursor +3 · 1400 installs — Prevents Kubernetes hallucinations when writing manifests, Helm charts, and Kustomize overlays. - [authentication](https://affpapa.org/en/nevibecode/skills/authentication.md) — skill · dpearson2699 · Claude Code, Codex, Cursor +3 · 3900 installs — Build iOS sign-in flows with Apple credentials, passkeys, OAuth and biometrics. - [helm-chart-builder](https://affpapa.org/en/nevibecode/skills/helm-chart-builder.md) — skill · Alireza Rezvani · Claude Code · 581 installs — Scaffolds production-ready Helm charts, analyzes templates for anti-patterns, and audits Kubernetes manifest security. - [clawsec-suite](https://affpapa.org/en/nevibecode/skills/clawsec-suite.md) — skill · prompt-security · Claude Code, Codex, Cursor +3 · 868 installs — This skill monitors ClawSec advisories, verifies signatures, and checks installed skills for affected entries. - [agentforce-test](https://affpapa.org/en/nevibecode/skills/agentforce-test.md) — skill · forcedotcom · Claude Code, Codex, Cursor +3 · 5700 installs — Writes and runs test suites for Agentforce agents: smoke checks, batch runs and adversarial probes. - [dx-org-permission-set-assign](https://affpapa.org/en/nevibecode/skills/dx-org-permission-set-assign.md) — skill · forcedotcom · Claude Code, Codex, Cursor +3 · 5700 installs — Assigns Salesforce permission sets to org users via sf org assign permset. Next: https://affpapa.org/en/nevibecode/skills/topic/security.md?page=19 ## Refine [audit](https://affpapa.org/en/nevibecode/tag/audit.md) · [owasp](https://affpapa.org/en/nevibecode/tag/owasp.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [compliance](https://affpapa.org/en/nevibecode/tag/compliance.md) · [google-cloud](https://affpapa.org/en/nevibecode/tag/google-cloud.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [oauth](https://affpapa.org/en/nevibecode/tag/oauth.md) · [auth](https://affpapa.org/en/nevibecode/tag/auth.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [jwt](https://affpapa.org/en/nevibecode/tag/jwt.md) · [secrets](https://affpapa.org/en/nevibecode/tag/secrets.md) · [reverse-engineering](https://affpapa.org/en/nevibecode/tag/reverse-engineering.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md